Wincleo Privacy Notice for UK Players
Which Company Decides How Your Data Is Used
The data controller for Wincleo is Cleoway Gaming Ltd, registered at Hamchako, Mutsamudu, Autonomous Island of Anjouan, Union of Comoros. This notice follows the UK GDPR and the Data Protection Act 2018 and applies to everyone who visits wincleo.io or opens an account with us. Cleoway Gaming Ltd alone determines why and how your personal data is processed, and every request in this notice is directed to it.
How to Complain to the ICO
You may lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator, if you believe we have handled your data unlawfully. The ICO helpline is 0303 123 1113. We ask that you write to us first at [email protected] so we can try to put things right, but doing so is not a precondition, and the right to complain to the ICO stays with you at every stage.
How Cookies and Analytics Are Used
Our website uses strictly necessary cookies, which keep you logged in and remember your cookie choice, and analytics cookies, which measure which pages are visited and how quickly they load. Under the Privacy and Electronic Communications Regulations (PECR) we set analytics cookies only after you press Accept in the cookie notice. To withdraw consent, clear the cookies for wincleo.io in your browser settings and decline the notice when it appears again.
Who Receives Your Data
We share data only with parties that perform a defined task for us. The table names them.
| Recipient | What they receive | Why |
|---|---|---|
| Visa and Mastercard | Card payment details and amounts | Debit card deposits and withdrawals |
| Skrill, Neteller and Paysafecard | Account or voucher reference and amounts | Wallet and voucher payments |
| Bitcoin, Ethereum, Litecoin and USDT networks | Wallet address and transaction amount | Cryptocurrency payments |
| Pragmatic Play, Evolution Gaming, Hacksaw Gaming and other game providers | Player ID and game session data | Running the games you open |
| Our compliance team | Identity and address documents | Verification and anti-money-laundering checks |
We do not sell personal data to advertisers or data brokers.
What Happens to Your Data After You Close Your Account
When you close your account we stop marketing messages immediately and remove your profile from active systems. Identity documents, payment records and gambling history are kept for five years after closure because anti-money-laundering rules require it. Once that period ends the records are deleted or irreversibly anonymised, and server logs are overwritten on a rolling schedule.
What Personal Data We Collect
At registration we collect your name, date of birth, email address, postal address and password. When you deposit or withdraw we collect payment details and transaction history, and during verification we collect a copy of a passport or UK photocard driving licence and a proof of address. Technical data arrives automatically, including IP address, device type, browser version, session logs and the pages you visit, and cookie identifiers are added to that.
How to Use Your Rights Over Your Data
Under the UK GDPR you may ask for access to the data we hold, correction of anything inaccurate, erasure, restriction of processing, portability of the data you supplied, and you may object to processing based on our legitimate interests. Send the request from the email address on your account to [email protected] and we reply within one month. Erasure is limited where a legal duty, such as record keeping for anti-money-laundering, requires us to keep the data.
When Your Data Leaves the United Kingdom
Cleoway Gaming Ltd is established in the Union of Comoros, and some of our game providers and payment partners operate servers outside the United Kingdom, so your data is transferred abroad. Where the destination lacks a UK adequacy decision, we rely on the ICO International Data Transfer Agreement or the UK Addendum to the standard contractual clauses, and we limit the transfer to the data a recipient needs.
Why We Process Your Data and on What Basis
We process registration and payment data to perform our contract with you, which is the basis for running your account. Identity checks and record keeping rest on our legal obligations under anti-money-laundering rules. Fraud prevention and site security rest on our legitimate interests, and analytics cookies and marketing emails rest on your consent, which you can withdraw at any time without affecting earlier processing.
Where to Send Personal Data Requests
Every request about personal data, whether access, correction, erasure or withdrawal of consent, goes to [email protected] with the words Data request in the subject line. We may ask you to confirm your identity before we act, so that nobody else can obtain your information.